D233: Duo Release Notes for February 4, 2022

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

New and updated applications

Bug fixes

See all bug fixes


New features, enhancements, and other improvements

Duo Universal Prompt now generally available

  • The Duo Universal Prompt, our redesign of Duo’s core authentication experience for web-based applications, is now generally available.
  • Administrators can decide when to enable the new prompt for existing applications. The Universal Prompt will be the default experience for newly created applications. You can choose to use the traditional Duo Prompt if you prefer. Note: Not all Duo-protected applications support the Universal Prompt. Refer to our documentation for more information.
  • At GA, the Universal Prompt provides feature parity for Duo’s MFA and Access editions, with a few exceptions. The Universal Prompt will also fall back to the traditional Duo Prompt UI to complete workflows required for features that have not yet been built into the new prompt. To see a full list of which features are available now, refer to our documentation.
  • The traditional prompt experience and Web SDK v2 applications remain supported after GA. Duo will communicate well in advance of the end-of-support date, allowing at least 18 months for migration to supported solutions.

End of support for U2F security keys used with Duo’s browser-based prompt

  • Google has announced it will no longer support U2F in Chrome beginning later this year. To accommodate this change, Duo has also ended support for the U2F authentication standard for security keys used with our browser-based authentication prompt as of January 24, 2022. WebAuthn is now the sole supported standard for security keys used with Duo’s browser-based prompt.
  • Duo customers do not need to take any action in response to this end-of-support milestone, and existing security keys will continue to work normally. For more information about the end of support milestone, see this Duo Knowledge Base article.
  • Note: U2F security keys will continue to be supported for Windows Offline Access, which does not use the browser-based authentication prompt. In addition, customers using Chrome OS in conjunction with U2F security keys have been granted an extension of April 30, 2022 to move to the Duo Universal Prompt. In certain use cases, Chrome OS logins do not support the pop-up needed to complete a WebAuthn security key authentication using the traditional Duo Prompt.

Added customization options for bypass codes when used by Help Desk administrators

  • Owner and Administrator-role Duo administrators can now customize the behavior of bypass codes when they are used by Help Desk role admins, including setting the expiration time and number of uses before expiration, without allowing Help Desk admins to do the customization themselves.
  • You can customize your bypass code settings in the Duo Admin Panel by going to Settings > Help Desk > Bypass codes expiration.

Minor UI change to Duo Single Sign-On Active Directory login screen

  • The login screen for Duo Single Sign-On with Active Directory now shows an “Edit” link next to the username, if one has been previously entered, instead of a “Back” button at the top of the page.

New and updated applications

Duo Mobile for iOS version 4.8.0 released

  • Added support for Portuguese (Brazilian) language.
  • Other miscellaneous bug fixes and behind-the-scenes improvements.

Duo Device Health application version 2.22.0.0 for macOS and version 2.22.0 for Windows, plus public beta release version 2.22.1.0 for macOS and version 2.22.1 for Windows

  • Version 2.22.0.0 for macOS:
    • Fixed an issue that could prevent automatic app launch after install.
    • Fixed an issue that could cause software updates to stall while app is running.
    • Minor improvements and enhancements.
  • Version 2.22.0 for Windows:
    • Fixed an issue that could cause the app to crash when Windows is shutting down.
    • Fixed an issue that could cause the app to crash during an authentication if the connection is closed early.
  • Beta release for macOS:
    • Fixed an issue that could prevent automatic app launch after install.
    • Fixed an issue that could cause software updates to stall while app is running.
  • Beta release for Windows:
    • Fixed an issue that could cause the app to crash when Windows is shutting down.
    • Fixed an issue that could cause the app to crash during an authentication if the connection is closed early.

Duo Unix version 1.12.0 released

  • Duo Unix now uses JSON rather than BSON.

Bug fixes

  • Fixed a UI bug in which an errant click near the help text for the Status radio buttons on a User details page could result in the radio button selection being changed.